CVE-2018-4007

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The program is able to delete any protected file on the system. An attacker would need local access to the machine to successfully exploit the bug.

• CWE-20

• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0676Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0676Exploit, Third Party Advisory

Published

Apr 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-4001An exploitable uninitialized pointer vulnerability exists in…7.8
• CVE-2018-4002An exploitable denial-of-service vulnerability exists in the…7.5
• CVE-2018-4003An exploitable heap overflow vulnerability exists in the mdn…9.8
• CVE-2018-4004An exploitable privilege escalation vulnerability exists in …5.5
• CVE-2018-4005An exploitable privilege escalation vulnerability exists in …7.8
• CVE-2018-4006An exploitable privilege escalation vulnerability exists in …7.8
• CVE-2018-4008An exploitable privilege escalation vulnerability exists in …7.8
• CVE-2018-4009An exploitable privilege escalation vulnerability exists in …7.8
• CVE-2018-4010An exploitable code execution vulnerability exists in the co…7.8
• CVE-2018-4011An exploitable integer underflow vulnerability exists in the…7.5
• CVE-2018-4012An exploitable buffer overflow vulnerability exists in the H…9
• CVE-2018-4013An exploitable code execution vulnerability exists in the HT…9.8